Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa
File:                     94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa (raw, json)
Hash identifier:          yMq6Um6vjpvKZIQwMbVcd4UN2LikTLggAVVDVUuPu28=
Subject key identifier:   A2:52:1B:82:49:E9:71:98:AC:1E:A3:0F:A7:D5:EC:23:41:B8:0A:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2C6BDD3B6547379D5850620227D01B06EEDE5238
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa
Signing time:             Wed 29 Oct 2025 00:50:10 +0000
ROA not before:           Wed 29 Oct 2025 00:50:10 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1ff3:5000::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6b:dd:3b:65:47:37:9d:58:50:62:02:27:d0:1b:06:ee:de:52:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 29 00:50:10 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=91400944b9f0e65e354f87a30e7794492a4be999ca0fe07957c1d3a70c0e115f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:e6:8b:87:fc:79:9a:7e:4f:11:ce:47:14:
                    62:e9:7e:44:6a:be:e2:e8:5e:33:71:0c:b4:b8:39:
                    eb:48:41:f4:9b:ac:96:48:56:d0:84:40:a6:cb:92:
                    10:ce:bc:a9:df:f6:cd:95:41:41:16:a5:d6:6b:83:
                    d3:28:41:24:1c:d2:ae:ed:58:0b:28:f3:5a:11:a6:
                    5e:53:a2:1d:ef:eb:53:3a:4b:f1:e6:42:9d:9b:42:
                    d8:44:3b:04:30:4c:75:8d:19:ea:61:f3:b9:d2:2f:
                    b1:9f:d6:35:a0:1e:de:37:6a:aa:35:6e:70:c5:a5:
                    0d:7c:01:06:02:63:e2:c5:03:f6:6a:a1:a5:d8:f0:
                    0d:78:14:01:7c:10:03:8a:12:9e:5b:46:2e:ee:f8:
                    6c:b5:1d:3b:c2:83:4e:c8:be:bf:50:c5:fa:dd:9a:
                    7b:dc:b5:0b:44:f0:b9:c0:1e:a4:c7:43:b8:35:28:
                    75:a8:5f:dd:1b:7e:8a:4e:92:69:11:52:00:24:99:
                    e2:11:7d:f1:35:c3:dc:46:64:a3:d7:9c:24:d8:8b:
                    19:ea:79:a1:64:2a:18:8f:cd:0f:b1:43:9e:9a:a1:
                    b5:c0:91:7c:6a:86:ab:8e:a8:7d:b1:ba:ae:59:e9:
                    d4:7f:ac:50:64:72:59:86:92:1e:0c:08:26:58:ed:
                    8c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:52:1B:82:49:E9:71:98:AC:1E:A3:0F:A7:D5:EC:23:41:B8:0A:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff3:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:9d:2f:f7:00:91:a0:d3:a8:f3:dd:93:a2:a3:02:b4:1a:b3:
         d3:b6:07:fe:ef:23:21:f0:db:13:e3:2a:54:bd:7f:3e:82:cb:
         d9:0d:b8:aa:d7:75:a1:18:50:fc:9d:c7:91:5a:9a:13:a4:a2:
         3a:3c:cf:27:14:12:63:8b:04:43:cc:d4:dc:85:ba:dd:0b:14:
         92:bb:4d:a8:71:75:74:59:99:05:1a:19:16:04:d1:42:9f:4d:
         ee:ef:a7:71:cd:d4:f6:ef:34:ed:01:ef:2e:ad:a6:0b:a1:02:
         61:80:77:5b:de:de:ab:b0:46:ff:5a:2d:46:48:bc:bc:07:93:
         60:80:a1:e2:45:9a:46:2f:f8:1c:e1:0b:0d:bb:9f:df:23:3e:
         4b:b0:4a:05:cd:7b:c4:79:c3:ca:65:a6:7a:1a:7c:21:29:dd:
         f2:e3:3d:37:c6:39:01:11:bd:b2:c9:c1:7a:87:49:15:d3:57:
         93:26:5f:96:5c:17:2c:a9:e0:19:6e:23:00:cb:06:66:6d:2f:
         f3:c2:f3:5d:44:44:dc:f2:3d:56:63:f9:59:c8:60:d4:38:63:
         97:fa:db:8a:de:63:4d:1f:b7:47:fc:5b:bf:ce:7a:ca:7f:5e:
         ff:25:80:3a:7d:6b:78:4c:4e:c1:10:f6:8f:a3:50:c6:0b:31:
         df:eb:02:c7
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIULGvdO2VHN51YUGICJ9AbBu7eUjgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI5MDA1MDEwWhcNMjUxMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5MTQwMDk0NGI5ZjBlNjVlMzU0Zjg3YTMwZTc3OTQ0OTJh
NGJlOTk5Y2EwZmUwNzk1N2MxZDNhNzBjMGUxMTVmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4keaLh/x5mn5PEc5HFGLpfkRqvuLoXjNxDLS4OetIQfSb
rJZIVtCEQKbLkhDOvKnf9s2VQUEWpdZrg9MoQSQc0q7tWAso81oRpl5Toh3v61M6
S/HmQp2bQthEOwQwTHWNGeph87nSL7Gf1jWgHt43aqo1bnDFpQ18AQYCY+LFA/Zq
oaXY8A14FAF8EAOKEp5bRi7u+Gy1HTvCg07Ivr9QxfrdmnvctQtE8LnAHqTHQ7g1
KHWoX90bfopOkmkRUgAkmeIRffE1w9xGZKPXnCTYixnqeaFkKhiPzQ+xQ56aobXA
kXxqhquOqH2xuq5Z6dR/rFBkclmGkh4MCCZY7YzVAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUolIbgknpcZisHqMPp9XsI0G4CuswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk0ZWEzMzM2LTJiYTMtNGVjYi05NGU1LTc1NmE4YmJiY2FlYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/zUDANBgkqhkiG9w0BAQsFAAOCAQEAuZ0v9wCRoNOo892ToqMCtBqz
07YH/u8jIfDbE+MqVL1/PoLL2Q24qtd1oRhQ/J3HkVqaE6SiOjzPJxQSY4sEQ8zU
3IW63QsUkrtNqHF1dFmZBRoZFgTRQp9N7u+ncc3U9u807QHvLq2mC6ECYYB3W97e
q7BG/1otRki8vAeTYICh4kWaRi/4HOELDbuf3yM+S7BKBc17xHnDymWmehp8ISnd
8uM9N8Y5ARG9ssnBeodJFdNXkyZfllwXLKngGW4jAMsGZm0v88LzXURE3PI9VmP5
Wchg1Dhjl/rbit5jTR+3R/xbv856yn9e/yWAOn1reExOwRD2j6NQxgsx3+sCxw==
-----END CERTIFICATE-----